Sun's TTSESSION Vulnerability

From: Bauer, Rich (rbauerat_private)
Date: Wed Sep 29 1999 - 06:12:19 PDT

  • Next message: Alesh Mustar: "Re: [EuroHaCk] Linux 2.2.x ISN vulnerability (fwd)" 

    One of our systems administrators recently told us that Sun's fix for the
TTSESSION vulnerability (running ttsession with DES) prohibits root from
using CDE in an NISPLUS environment, and prohibits any user from using CDE
in a stand-alone environment.  Is there a patch forthcoming or some other
work-around that doesn't have these limitations ?

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:05:45 PDT